Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133392e302f32342d3234203d3e20323730373337.roa
File:                     3137372e3232312e3133392e302f32342d3234203d3e20323730373337.roa (raw, json)
Hash identifier:          yXEIPwIE4lF89U/VZkn1Yd22VmKUEWiqjkjH2ZTLm7U=
Subject key identifier:   14:99:EA:A9:D1:0D:A5:15:3D:78:9E:6B:6C:34:89:33:E7:99:FB:59
Certificate issuer:       /CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Certificate serial:       2BBFAE1D0B428C10C187A26AECDC7A6195679FD3
Authority key identifier: 29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133392e302f32342d3234203d3e20323730373337.roa
Signing time:             Fri 02 Aug 2024 11:28:09 +0000
ROA not before:           Fri 02 Aug 2024 11:23:09 +0000
ROA not after:            Fri 01 Aug 2025 11:28:09 +0000
asID:                     270737
IP address blocks:        177.221.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl
                          rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bf:ae:1d:0b:42:8c:10:c1:87:a2:6a:ec:dc:7a:61:95:67:9f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
        Validity
            Not Before: Aug  2 11:23:09 2024 GMT
            Not After : Aug  1 11:28:09 2025 GMT
        Subject: CN=1499EAA9D10DA5153D789E6B6C348933E799FB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:3b:6c:73:bb:c7:25:95:7b:f7:6f:9d:ea:
                    33:bf:4a:1b:4c:1d:00:b1:c3:bd:37:fa:19:90:a2:
                    1a:46:76:51:08:d8:ed:e2:10:71:fc:8b:96:68:74:
                    1b:6e:fa:79:ef:45:8f:55:6d:89:96:d3:ab:b3:7e:
                    20:8c:62:75:3a:bd:5b:be:75:a4:a4:6d:a4:fb:24:
                    bb:5f:55:08:09:ad:bf:e9:0c:90:ba:a0:4a:2d:40:
                    95:2a:3b:d3:6f:dc:c7:f4:3c:1e:89:98:57:0d:63:
                    79:62:87:4a:87:cb:48:e2:3b:78:6f:eb:2f:8e:5b:
                    83:d7:62:ba:55:9d:c7:b8:6c:61:78:11:f5:f8:1c:
                    e4:cf:bb:12:f9:e1:38:f0:b6:fd:8a:11:0d:00:7e:
                    f6:79:51:44:2b:39:fe:72:e0:9d:58:21:9e:27:2a:
                    81:69:e8:bd:b6:19:47:74:47:59:08:41:5e:d5:dd:
                    52:d6:ac:e3:b0:00:01:6c:4b:b6:1b:2e:c3:fd:7c:
                    c6:70:1f:fc:30:8a:11:fb:9c:69:2c:dc:f9:40:f6:
                    31:87:9b:40:ab:eb:4e:db:d9:7c:2e:f3:b4:45:7f:
                    8e:fc:1e:50:ed:04:5d:7a:5c:f9:b5:75:47:0c:36:
                    d5:c6:33:13:b9:8a:47:9f:43:ab:12:7a:af:e7:59:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:EA:A9:D1:0D:A5:15:3D:78:9E:6B:6C:34:89:33:E7:99:FB:59
            X509v3 Authority Key Identifier:
                keyid:29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133392e302f32342d3234203d3e20323730373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:14:58:48:18:a1:42:0c:a5:bc:21:c8:d8:1e:9d:c3:95:
         e4:71:61:c6:98:42:81:3f:51:de:50:d1:cd:5d:f6:2d:86:d4:
         b2:6d:b4:e6:e6:4e:38:d8:a3:90:ac:fe:af:ed:b1:c9:7d:f9:
         4a:07:fe:55:8e:99:43:8a:46:56:01:c0:eb:0f:9f:83:d3:80:
         9d:44:a3:bd:85:5e:52:97:85:1f:c0:fd:36:d6:51:70:26:56:
         40:90:53:fe:12:cc:41:ab:e3:66:0b:0a:de:82:b9:63:ff:47:
         60:ad:e7:3e:4c:2a:a9:01:74:bd:34:0c:b8:07:67:03:2a:0b:
         37:ad:4a:66:a0:ac:b0:8c:38:87:06:b1:dc:79:15:6c:6e:73:
         e2:31:e7:03:84:79:d1:7c:81:6d:17:db:7c:34:61:86:55:5c:
         b0:65:6f:f8:a2:7a:5a:59:7e:be:60:fb:47:25:ed:ef:8b:ff:
         47:ae:4e:4a:8e:8c:f5:63:0c:57:c9:62:b8:9d:79:b9:e7:5c:
         8c:9d:2b:3b:ea:e1:fe:e1:61:4e:f4:81:f8:48:e0:2f:17:76:
         44:a5:5f:90:75:f3:0c:b6:5e:3e:9a:d9:28:61:5d:8d:1d:86:
         f9:20:f3:d8:12:d7:c4:fb:34:f9:9d:23:ea:a9:6d:66:db:80:
         62:8d:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org